Controller Based WLANs

What does this message mean: "IDS EAP handshake rate anomaly"?

Product and Software: This article applies to all Aruba controllers and ArubaOS versions.


In the WebUI, the Monitoring > Global Events page displays various IDS events.


The message "Event IDS: EAP handshake rate anomaly" means that a client was trying to flood the authentication server with wrong credentials. IDS reports this event with the MAC address of "aruba Ap", which means that it was detected through that AP.


The Aruba switch detects this event as a rate anomaly.

Version History
Revision #:
1 of 1
Last update:
‎07-10-2014 06:19 AM
Updated by:
Labels (1)
Search Airheads
Showing results for 
Search instead for 
Did you mean: 
Is this a frequent problem?

Request an official Aruba knowledge base article to be written by our experts.